0b9ab16f69cae38e2b26fd1c42852ad10f933db3dda6bd995554e8b9541eeea0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b9ab16f69cae38e2b26fd1c42852ad10f933db3dda6bd995554e8b9541eeea0
Size

71KB
MD5

274df6504d42bbc61d55ee43088c70c3
SHA1

8a93d01033c6cea8d6eb546252f9a14cbc6b3361
SHA256

0b9ab16f69cae38e2b26fd1c42852ad10f933db3dda6bd995554e8b9541eeea0
SHA512

c1c4fc7290b28eeef6a53e5354969ebf081fd8f4dd0062ef91f79dfd687b89c227993b6e0b07c8db1445df305ec06d4e6b159c1a3f0bfcd962efb2d384d4179e
SSDEEP

1536:vknEFzNGLlM0xttHtyrPsNCp53gvUsuBjnQwiwAXaMzuHWUw0:8n1M+72hg83jnQ9bkJ5

Score

N/A

Malware Config

Signatures

Files

0b9ab16f69cae38e2b26fd1c42852ad10f933db3dda6bd995554e8b9541eeea0
.exe windows x86

7c879a14f55877276ab6caaca570c735

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
InterlockedExchangeAdd
WriteConsoleInputW
CompareStringA
FindActCtxSectionStringA
DeleteTimerQueueTimer
GetFirmwareEnvironmentVariableA
SetVolumeLabelA
EnumSystemLanguageGroupsW
SetComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE